You are viewing a plain text version of this content. The canonical link for it is here.
Posted to jetspeed-user@portals.apache.org by Stuart Belden <SB...@bjc.org> on 2003/04/03 15:59:48 UTC

RE: Urgent security bug! Was asked in the past, but not answered...Can anyone help?!

Are you using Jetspeed's security cache?  (services.JetspeedSecurity.caching.enable=true in JetspeedSecurity.properties). If so, grab the latest copy of SecurityCacheImpl from cvs; I submitted a patch a while back forthe same problem you're having I think.
http://issues.apache.org/bugzilla/show_bug.cgi?id=17734

>>> MoabiN@discovery.co.za 04/03/03 06:58AM >>>


-----Original Message-----
From: Moabi Nyokong [mailto:MoabiN@discovery.co.za] 
Sent: 02 April 2003 09:24
To: 'jetspeed-user@jakarta.apache.org' 
Subject: RE: Urgent security bug! Was asked in the past, but not answered.
..


Sorry, forgot to send this:
Using JS 1.4b3 on Oracle 8.1.7 and Weblogic 7.1 on Win 2000  Server

-----Original Message-----
From: Moabi Nyokong 
Sent: 02 April 2003 09:16
To: 'Jetspeed Users List'
Subject: Urgent security bug! Was asked in the past, but not answered...
Importance: High


This question was posed by jasenj1 last year some
time...http://www.mail-archive.com/jetspeed-user@jakarta.apache.org/msg07276 
.html
*****
1. Security Role Browser.
        Add a role - myrole.
        After the role is added, select "Permissions".
        Fill in some of the checkboxes.
        Select "Update" - you are taken to the list of Permissions NOT the
list of roles.  That seems wrong.
        Select "Security Role Browser" again.
        Select "Permissions" for the role you created.
        All of the Permission checkboxes are empty - where'd the settings
go?
*****

I frequently get this problem, but on my side I use certain permissions to
allow access to parts of portlets, and once anything is touched on  the
role/permission side of the security set-up, Jetspeed seems not to be able
to find the association between roles and permission, and my portlets fail.
The only solution is to restart the app. server...On the other hand if I
have an exact copy of the JS deployment running on another machine, hitting
the same Oracle 8i DB, I can run all my portlets with no problem. Is this an
Oracle connection problem? Has anybody else had this issue? Please help,
we're stuck, and going into production soon....


Moabi


---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org 
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org 

---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org 
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org 



---------------------------------------------------------------------
To unsubscribe, e-mail: jetspeed-user-unsubscribe@jakarta.apache.org
For additional commands, e-mail: jetspeed-user-help@jakarta.apache.org